8498388ee5425aa54998a83268381685c9651788d978a4314b8d7075e154e129

Analysis

max time kernel
149s
max time network
152s
platform
android-11_x64
resource
android-x64-arm64-20260325-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
submitted
08/09/2026, 18:18

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
MX-Ludo.apk
Size 3.1MB
Sample260908-wxyr2swtbz
SHA256 8498388ee5425aa54998a83268381685c9651788d978a4314b8d7075e154e129
MD5 80973f5008ee8ebd601e482b6a962593
SHA1 b129b98d4d2acb583460993854cf85f1c02dfd4b
SHA512 52d8bc8182e7b8b0faa0a2ec46ce17c35f39dfc17a1ff421a9e14dd278e10d814bee2329bb478d41776ce68056d694239bfa361385d6e4f11998d887ae16aeb5
SSDEEP 49152:D/V6sy/0nvYfD//mb01lHRGjbimx9wMvhoBTGSZIFxphUc3h5C:DAsmcGjmb0xJmx9VoBySCUc3hY
TLSH
T1FFE5E08AF768992FCC7750320DAA527152578CD68E839B477848372C68B76D80F5EBCC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

collection credential_access defense_evasion discovery execution impact persistence

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 8 IoCs

defense_evasion

System Information Discovery

T1426

ioc	Process
/system/bin/su	com.mx.ludo
/system/bin/failsafe/su	com.mx.ludo
/data/local/su	com.mx.ludo
/sbin/su	com.mx.ludo
/system/xbin/su	com.mx.ludo
/data/local/xbin/su	com.mx.ludo
/data/local/bin/su	com.mx.ludo
/system/sd/xbin/su	com.mx.ludo

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.mx.ludo

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.mx.ludo

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.mx.ludo

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

execution persistence

Scheduled Task/Job

T1603

description	ioc	Process
Framework service call	android.app.job.IJobScheduler.schedule	com.mx.ludo

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.mx.ludo

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.mx.ludo

com.mx.ludo
1⤵
- Checks if the Android device is rooted.
- Obtains sensitive information copied to the device clipboard
- Acquires the wake lock
- Queries information about active data network
- Schedules tasks to execute at a specified time
- Checks CPU information
- Checks memory information
PID:4716

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Scheduled Task/Job

T1603

Persistence

Scheduled Task/Job

T1603

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

OneSignal.db

Path /data/data/com.mx.ludo/databases/OneSignal.db
Size 52KB
SHA256 491c9687657ca71661a5cf42a763249f88fa222edaef20eaf552c4599458f99e
MD5 f1427539ecc4cedfa892efc1776ba3ed
SHA1 814607670e99768ae6212224860b0a1fb93733db
SHA512 c3ebbf63c4e876e471848f810e7ad7c0cb56a946230073b5196f7b3ce5d1f144c800ec5787992ff2ee057f712d7c7f1b92b47761294aede13183c796e5ab043d
SSDEEP 24:TLLS57ZBUWEaKdStdxyqOkPU/+XiByrBNDd2+32ISpvJqrEqjUix5+xGTrOPjwVw:TE7AcrA0oJxqrKcrObMoOS
TLSH
T194338BCF4B862191EFC765B3155252E44E3B610E889317A63BF760245E83B16D72387C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OneSignal.db-journal

Path /data/data/com.mx.ludo/databases/OneSignal.db-journal
Size 8KB
SHA256 9a956dbc83f428e9115fd844a7dce8973d31d2e0daca84d46e84cbe70295155c
MD5 55ebacba970473e510c0f163ca63673b
SHA1 da84ba9e8a8e4ac1869a0dc67d345de447bad71e
SHA512 91e15b3af430d9ba7a321803c8e39f6e37f46ab1292693921cc36a9b76cf36925bc2bd642ea6ab5de060ae6d14260733f6fe515d4c99d7578dc48361a9eda2ad
SSDEEP 6:7+/l9sTWUHn1KWWWg9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuKc:7+tfUkWRqLiuWdYRmBEyPbH
TLSH
T14202C0CD63C00813C92D16B7A0D8C3800D00F728C171CF5736900894FC474CCE4B0D04
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OneSignal.db-journal

Path /data/data/com.mx.ludo/databases/OneSignal.db-journal
Size 8KB
SHA256 59c7997d5db4760fba796c5fe3d9cb9cc0cbf41c40b0e080c17638c941b432e1
MD5 7e0255224ce21af6f1746998c7065d81
SHA1 a90d4049630af08502a3ef5d16a4e2035c789fea
SHA512 1990a91d195df721aedc777ea07d7dd2fc7af6e86cf12a6191b67f450d4b7c9c63d43dece9e557851d213e094c0f79e4a4f2f10b715b228045aac0238fb5ef3f
SSDEEP 6:7+/l9gpFPg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuKoOt/T:7+t4qLJdeWRmBEyPb81T
TLSH
T1120222C8A3C00903C5291B7BA0D883401E14B72A9233CB071B930A643C466CCEC90D00
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OneSignal.db-journal

Path /data/data/com.mx.ludo/databases/OneSignal.db-journal
Size 512B
SHA256 ffb41daeef4bb9bae973f501a43cccdedec36cb92b3f40ecc2c32f513a02b637
MD5 0ef6f2400945e718bdefc8d9a5cc0b68
SHA1 9bc25a497099523246819f59d510f68eb9623692
SHA512 aa18efbb458d5db2181638966ee46116bc217d8dbab8d9a7d944b1bdfa165dd59e4738207ccfd70e576c39b8a3b00e2c6f09d7aee47b0f575d9fa224563d1f4d
MD5 SHA1 SHA512

Submit Download

com.google.android.datatransport.events

Path /data/data/com.mx.ludo/databases/com.google.android.datatransport.events
Size 56KB
SHA256 bc5046964d09af5dc1d23ee85df7833643cca767c016ba653a2d822126be6498
MD5 77d9f371893cb0233024f2b995093524
SHA1 95cb9302752c856594901dacf9acdd1f06b7bf72
SHA512 86ab4936875caeb16d75536e94e7f47dcf79c90a0912eea5640e86764c743fc1d43709ef539691970b977f9092b4f6a60ba1050cf27fdf36f3acaf2520ca4ff1
SSDEEP 48:T/3g59MENZBdUdndVd/729IvdldHlq8/Jq4qPSg:rAMEX0wIyNjag
TLSH
T1F943839D1A3C2220C57E283ED3E143635B7C93DF572392223D908CF98DC206974358A9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.mx.ludo/databases/com.google.android.datatransport.events-journal
Size 512B
SHA256 2963f0d8fc8ab65e214f891a48ee6b2b361aadcfe54838853ba72a146c5901a4
MD5 71e6c3c01e5bbed8df93db278383eb03
SHA1 d510d43a1db96db8298761d41c78af19f72d3c21
SHA512 70714354a7faf6c9a6a5e901b1cd11858969ee7f65b41f6d55774773ecc35278cbaea42c37eae4a1b1490415d16ba13a40674912dd9a4123cbbe342b6edbb226
MD5 SHA1 SHA512

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.mx.ludo/databases/com.google.android.datatransport.events-journal
Size 8KB
SHA256 d6bfc1a8b858e3d725b700f64f4e1275df2409f5db196b15911711ea76169f0f
MD5 7a09bbcf872b2c763ad693322a1325c8
SHA1 416c077e7e6cc9c88dc3c946ca2a472e1f37d26d
SHA512 cb1d65797ce983e94748818aa80cfcf44e7c49a9328f5f1dd22332d3a5aa02a2f7a90b089af961e61b5a702fa9454db438a89c94d8894619d08ce0196a30b01e
SSDEEP 6:7+/l9fIun1Cg9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuKH:7+t9yqLiuWdYRmBEyPbo
TLSH
T16E02C09C67C04813C82D1A7BD0D483840F10FF2AF9F1CB1716A008943C074CCE4B0D44
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.mx.ludo/databases/com.google.android.datatransport.events-journal
Size 8KB
SHA256 7afff4d913c7032e56c62fd7d534ef129f45aef640955d4f013f6c412728181c
MD5 e1b4186b79b6575126c806f9340e3d57
SHA1 db0b207cbfde8a33296719a6a605405e0e8de8eb
SHA512 299f25a27f60b73e8edd15b55d7836fa45c2627ab166e630281e780eae80962178445dffd487b9f6971d84c30635a93355a340cbe5b8e3e58c153b667e6388a0
SSDEEP 6:7+/l9lgPg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuK4xs//4E:7+t8qLJdeWRmBEyPbQX4E
TLSH
T166021289E7810913C53957BBB4DD83545E14E7299273CB57569108B86C4B6CCE890D54
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PersistedInstallation6395369231311086303tmp

Path /data/data/com.mx.ludo/files/PersistedInstallation6395369231311086303tmp
Size 570B
SHA256 f19335689effab9fee8a959e0ff524bd100ee3dfa447001dc63ed9533b3f74b7
MD5 7b284e4dcdc2442ba0d0355eb98352e6
SHA1 2e16bbfe4b3579971fc9616c7a7caff9844d9401
SHA512 0ea2b0b5091d8b387df98bcec53cb06cbc5fe88ecbfb9ce58f8baa02e405fca88d66a97234203b37091c6968fb470d0968a41877d64a20050aacba6a733dbfcf
TLSH
T12EF0414AA7618225D48412CE28CE3C540C2444A1170508E8AFC4C8A07E61BBAA28E880
MD5 SHA1 SHA512 TLSH

Submit Download

PersistedInstallation7205493295276160850tmp

Path /data/data/com.mx.ludo/files/PersistedInstallation7205493295276160850tmp
Size 90B
SHA256 2d1fe9cb2f58923bb4bfd24b0cc073037a599527a4f47131992a4847f8c4c75f
MD5 0d36b82655b284a94bd900d7be566872
SHA1 711bfbac7c9380e1adb1601c4b3918c58cedbd17
SHA512 a50848d1d074469eb0d60e9a79dfe09ea97d70e60f8488ab4c3d5fd77d2d94c97adf560470fa44cc028e740ece83e35ce865fae870613095c41a3bf556dde241
TLSH
T107B01202D73943C28485F3171C8C93015EB018421C098A484A08909002D21E08513EA8
MD5 SHA1 SHA512 TLSH

Submit Download

profileinstaller_profileWrittenFor_lastUpdateTime.dat

Path /data/data/com.mx.ludo/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
Size 8B
SHA256 a0a2f3a5d265ab797710a66680d6f7a93162b9647ec4c169c42cee9f3ad69e30
MD5 2893e6c4e706b04acf8c8f725243c558
SHA1 a6b723221e97b2e7c020c275a1cf9ed8f4c2e559
SHA512 969138bf77e95050b82be61800150b26f81aa561483e0f4c27accb744fe04a51d4bc1b52181805bb184317dd77f04dd13c86f60b84a6afa7c27a6c4ea775ec2a
MD5 SHA1 SHA512

Submit Download

androidx.work.workdb

Path /data/data/com.mx.ludo/no_backup/androidx.work.workdb
Size 4KB
SHA256 9010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad
MD5 7e858c4054eb00fcddc653a04e5cd1c6
SHA1 2e056bf31a8d78df136f02a62afeeca77f4faccf
SHA512 d0c7a120940c8e637d5566ef179d01eff88a2c2650afda69ad2a46aad76533eaace192028bba3d60407b4e34a950e7560f95d9f9b8eebe361ef62897d88b30cb
TLSH
T1A8810240534000E1D06406B2549113080B0AD1A4A5410B13264200428C455840C60A85
MD5 SHA1 SHA512 TLSH

Submit Download

androidx.work.workdb-journal

Path /data/data/com.mx.ludo/no_backup/androidx.work.workdb-journal
Size 512B
SHA256 2fa825aec2317a0a2c8cdc18b69b686ded3b4bc1cb1cfff923efc82505efe13d
MD5 85571fe7a3b88f08d839dd245a370964
SHA1 c5a42306c5a2df380403c012b93391bff551b10f
SHA512 ddfe64c96e9682992628cc2fc4b595daebd192740ce32a2a641ba1844e2efb8e69d6a69d861e5afd87ea2b95a151ffff60ce71caee91c7d7618ccb26b000f0b8
MD5 SHA1 SHA512

Submit Download

androidx.work.workdb-shm

Path /data/data/com.mx.ludo/no_backup/androidx.work.workdb-shm
Size 32KB
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
SSDEEP 3::
MD5 SHA1 SHA512 SSDEEP

Submit Download

androidx.work.workdb-wal

Path /data/data/com.mx.ludo/no_backup/androidx.work.workdb-wal
Size 16KB
SHA256 ccc24bfe2c7a0047b0e3dd978c4d6552207c61b77b5cc389e8e091786bb8e56f
MD5 02017902cf25afebdd7e5db72dea39ec
SHA1 f11952361a7871beac6a43cf8511a95bb36ef508
SHA512 7bc30f6bb5da56ccaa0180fbaddad089bca3aae9d5e2863711ab3216fb926a3b34629ee30ef4130731a68bbc15a5049dd5597555da9c2d433697a64b94095366
SSDEEP 12:K68yis3oUQlzdeWRmBEyPbP/c8j/q0Qu602Ow2:K6zisYvzKGSP/1/FHU2
TLSH
T1A572C244A3E00AA3CA9B97F252ECC380DF3113186626C70B3F9105607C12EEE55B0E48
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

androidx.work.workdb-wal

Path /data/data/com.mx.ludo/no_backup/androidx.work.workdb-wal
Size 112KB
SHA256 23eb174aeaefb1ec90194018f760bf6895666c48e654475fa02815e6c597c191
MD5 01da1eed14fd1d9e293eec632f1f26a6
SHA1 9eafddf390afd19333c323cb85683a512653249b
SHA512 abed8c39d9e95aa0c6ef37f213a9043aa2920975504d098b6b857dbe660fefd06fef222e30f1ca7007b742219ffcb9e390fb860f3ad9da0a394e09980af90301
SSDEEP 96:dagD7W3DP6+hdjnHtDRgL/f8dKeKcK+zSXKM+6D86T0ExV:V7KndjnHt9S/f8JzSV+6D86T0ED
TLSH
T1BDB3DF8D0FA92600C8EA54F096A00AE1F93E432D9793E3D179910075BDD2936DA79CF5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

androidx.work.workdb-wal

Path /data/data/com.mx.ludo/no_backup/androidx.work.workdb-wal
Size 193KB
SHA256 3569622b9319c7615ab10adde6d1f5b333fb18b1ec7a3eb0cfc699faf9bda6c3
MD5 c1d172dcb98568b487350d1944503ffe
SHA1 81bc048870219afeec1ee30e8378bb0c09a8afb0
SHA512 90438673565bd9159ff9d2dfd001a43e5476e107ccc5b9e64be79d93ddd84eed02d0f9c77a77382c222fa4ca3deb11bd2ec602fa545b931266f36a5c3178e1f8
SSDEEP 96:8E21DtYMUE26E2FUUu2Lu2dE21DtYGzZE21DtYJpE21DtY:c1DtYMEKmK9t1DtYU1DtY/1DtY
TLSH
T1BC148EEE23BE4574FF8F013BAB6204F285B716F40EBA9405D9EE4214609222D87B7D91
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/com.mx.ludo/primary.prof
Size 2KB
SHA256 34834bf0e694fbbcce64111c53ae8cebe13decbac651c9c94be5126a22be51fc
MD5 bde409ec48292038ba2d548f33bb6747
SHA1 e95bdf3b227d62347445f675f49f58ac43810a8d
SHA512 bf8b67d3c8eec6c870677fd51c6d64339cd18383ba526224d944dc220fb26ab34ec51549d558c2c1a180691b24051c743628719b677c16873a3a34b3d5cb92ac
TLSH
T154411A205421C035BDD6FC14FEFA9BC20580757D1AFD5502203DA49DB88CAE1D47C412
MD5 SHA1 SHA512 TLSH

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/com.mx.ludo/primary.prof
Size 6KB
SHA256 66ef364385f02f4099ae7252994c9fe5bbc57a84ebc3fbe920e94c8b8767ed03
MD5 456720cdf47913654dfb22124bdfe1a2
SHA1 7c55ac199fda0de671a3c1b7ecd09233683e47a9
SHA512 d601a97d19547291ca3a90cea2ff2927b17997aac86d64e88ee65d2eaa497afc6da00696e4a451cbb17dd608168698eb044e79b59450066b7a061b3035fb9e40
SSDEEP 192:4gLjTulYdxfos5TAPWNlcIAvfmwqdN12L5N1a8eXm0upH:vfTwbPqKvf9qB2NKToH
TLSH
T171E1BFF969D7AFB13A73196B4941CED966048218516E24CFFE113622D0DBE3A3A24182
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads